Chat now with support
Chat with Support

NetVault Plug-in for Advanced Encryption 11.4 - User Guide

Introducing NetVault Backup Plug-in for Advanced Encryption

Introducing NetVault Backup Plug‑in for Advanced Encryption
•
About NetVault Backup Plug‑in for Advanced Encryption
•
Target audience
•
Recommended additional reading

About NetVault Backup Plug-in for Advanced Encryption

About NetVault Backup Plug‑in for Advanced Encryption

NetVault Backup offers two encryption products:

•
NetVault Backup Plug‑in for Standard Encryption (Plug‑in for Standard Encryption): The Plug‑in for Standard Encryption supports CAST-128 algorithm to protect your data and meet the regulatory requirements.
CAST-128 is a 12- or 16-round Feistel network with a 64-bit block size and a key size of between 40 to 128 bits, but only in 8-bit increments.
•
NetVault Backup Plug‑in for Advanced Encryption (Plug‑in for Advanced Encryption): The Plug‑in for Advanced Encryption supports AES-256 and CAST-256 algorithms to protect your data and meet the regulatory requirements.
•
CAST-256: CAST-256 uses the same elements as CAST-128, but it is adapted for a block size of 128 bits — twice the size of its 64-bit predecessor. Acceptable key sizes are 128, 160, 192, 224 and 256 bits. CAST-256 is composed of 48 rounds, sometimes described as 12 “quad-rounds”, arranged in a generalized Feistel network.
•
AES-256: Advanced Encryption Standard (AES) is an encryption standard adopted by the U.S. government. The standard consists of three block ciphers, AES-128, AES-192, and AES-256. Each AES cipher has a 128-bit block size, with key sizes of 128, 192 and 256 bits, respectively.
 
* 
NOTE: The CAST-128 and CAST-256 encryption algorithms do not comply with the requirements of the United States Federal Information Processing Standard (FIPS). These algorithms are provided for the restoration of legacy data. For FIPS compliance, use the AES-256 algorithm.

When installed on the NetVault Backup Client, these plug-ins encrypt and transfer data across the network to the backup device, where the data remains encrypted until restored to the client. If encryption is only required for secondary storage, job-level encryption offers the choice of encrypting only the secondary copy while the primary backup remains unencrypted to shrink the backup window. When using disk-based storage devices, job‑level deduplication allows you to separate deduplicated from nondeduplicated unencrypted data for optimal deduplication ratios and performance.

For a list of NetVault Backup Plug-ins that are incompatible with the Plug‑in for Standard Encryption and Plug‑in for Advanced Encryption, see the respective release notes.

 
* 
NOTE: The NetVault Backup encryption architecture only supports the Electronic Code Book (ECB) mode of operation. This support means that every data block is encrypted individually. If two or more consecutive blocks contain identical data, the encrypted forms of these blocks are also identical.

Target audience

This guide is intended for Backup Administrators and other technical personnel who are responsible for designing and implementing a backup strategy for the organization. Familiarity with encryption solutions is assumed.

Recommended additional reading

The following documentation is also available:

•
Quest NetVault Backup Installation Guide: This guide provides details on installing the NetVault Backup Server and Client software.
•
Quest NetVault Backup Administrator’s Guide: This guide explains how to use NetVault Backup and describes the functionality common to all plug-ins.
•
Quest NetVault Backup CLI Reference Guide: This guide provides a description of the command-line utilities.

You can download these guides from https://support.quest.com/technical-documents.

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating